Bug#403583: exim4: client TLS authentication is broken

[Marc Haber]

On Fri, Jan 05, 2007 at 01:19:39AM -0500, celejar wrote:
> On 1/3/07, Marc Haber <mh+debian-packages at zugschlus.de> wrote:
> >* is a catchall, I have verified this in a test setup with a smarthost
> >that had its reverse DNS deliberatelybroken.
> >
> >You only need to put the IP address in passwd.client if you have
> >specified a host name with broken reverse DNS there as the hostname
> >will only be compared to the reverse DNS.
> 
> Perhaps I'm missing something, but as I mentioned in my original
> report, my passwd.client does have an '*' line and exim still often
> fails to authenticate.

That is not supposed to happen. The "*" line should work.

Can I see debugging output of a failed delivery attempt? If the
debugging output you recently sent was already made with a "*" in
passwd.client, please

(a)
verify that your passwd.client line is formatted like:
*:username:clear-text-password

(b)
show me the output of:
exim4 -bP transport remote_smtp_smarthost | grep hosts_try_auth
and (long line!)
exim4 -be "$(exim4 -bP transport remote_smtp_smarthost | grep hosts_try_auth | awk '{print $2}' FS="=")"

(both lines need to be executed as root).

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835